CVE-2025-58434-PoC

CVE-2025-58434-PoC This repository contains a Proof of Concept PoC Python script for CVE-2025-58434, which enables attackers to change passwords of other users without authentication process in flowise version 3.0.5 and lower due to token leakage. Usage To run the exploit, use the...

CVE-2025-58434

Replace example.com with your target...

CVE-2025-58434-PoC

CVE-2025-58434 PoC Python proof-of-concept script for triggering POST /api/v1/account/forgot-password. ⚠️ For educational and authorized security research only. Running this tool against systems you do not own or lack written permission to test is illegal. Credit zaddy6 Isaac David arthurgervais...

Flowise-RCE

Flowise-RCE CVE-2025-58434 & CVE-2025-59528...

CVE-2026-58434

Private Repository Metadata Remains Accessible After Access Revocation...

CVE-2026-58434 Private Repository Metadata Remains Accessible After Access Revocation

Private Repository Metadata Remains Accessible After Access Revocation...

CVE-2026-58434 Private Repository Metadata Remains Accessible After Access Revocation

Private Repository Metadata Remains Accessible After Access Revocation...

CVE-2026-58434

The Gitea repository management system is affected by a vulnerability where private repository metadata remains accessible even after access has been revoked. This issue can lead to the exposure of sensitive information to unauthorized actors. Remediation is available in Gitea version 1.27.0 , wh...

SUSE CVE-2026-58434

Private Repository Metadata Remains Accessible After Access Revocation...

CVE-2026-58434

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:40+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-j2w3-9c3r-g83q...

Exploit for Missing Authentication for Critical Function in Flowiseai Flowise

CVE-20...

Exploit for Missing Authentication for Critical Function in Flowiseai Flowise

Silentium — HackTheBox Writeup Platform: HackTheBox...

Flowise < 3.0.5 - Missing Authentication for Critical Function

Exploit Title: Flowise 3.0.5 - Missing Authentication for Critical Function Date: 10/11/2025 Exploit Author: nltt0 https://github.com/nltt-br Vendor Homepage: https://flowiseai.com/ Software Link: https://github.com/FlowiseAI/Flowise Version: 3.0.5 CVE: CVE-2025-58434 from requests import post fr...

📄 Flowise Missing Authentication

Proof of concept for Flowise versions prior to 3.0.5 that suffer from a missing authentication vulnerability. Exploit Title: Flowise 3.0.5 - Missing Authentication for Critical Function Date: 10/11/2025 Exploit Author: nltt0 https://github.com/nltt-br Vendor Homepage: https://flowiseai.com/...

CVE-2025-58434

Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5 and earlier, the forgot-password endpoint in Flowise returns sensitive information including a valid password reset tempToken without authentication or verification. This enables any attacker...

CVE-2025-58434

creationtimestamp| type| source ---|---|--- 2025-09-12 17:22:29+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-wgpv-6j63-x5ph 2025-09-13 00:01:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lyohwndubm2t 2025-09-15 02:29:07+00:00...